CVE-2026-96616 — Kiloview E3 NDI Encoder Insufficient Session Expiration
Authentication tokens issued by the E3's web management interface on login are given an expiration time far beyond any reasonable session lifetime, effectively making them non-e…
Published: 2026-10-22 · CVSS: 8.3 · CVSS 4.0
Authentication tokens issued by the E3's web management interface on login are given an expiration time far beyond any reasonable session lifetime, effectively making them non-expiring. A token obtained through interception or device compromise remains valid for authenticated access for an extended period.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7